WorkSpace One Systems Engineer

Tetrad Digital Integrity LLC; Washington (Washington County); Hybrid; USD 120,000 - 140,000; Full time

Job summary

Tetrad Digital Integrity (TDI) seeks a Systems Engineer for Mobility to own administration, security, lifecycle, and reliability of the Unified Endpoint Management - Mobility environment supporting about 20,000 users across iOS, iPadOS, Android, and macOS, with a focus on macOS engineering and security within Workspace ONE.

This hybrid role requires coordination with on-prem Exchange and Microsoft 365, adherence to mobility security standards, and collaboration with Cybersecurity, UEM, and SOC

Qualifications

• Bachelor’s degree in Computer Science or a related field with 5+ years of relevant experience in Mobile Device Management.
• Proficiency in Workspace ONE UEM administration with 3-4 years of hands-on experience.
• Experience managing macOS in an enterprise environment using Workspace ONE or comparable MDM platforms (e.g., Jamf, Intune).
• Hands-on experience with macOS configuration profiles, scripting, patching, and security controls.
• Good understanding of mobile operating systems and enterprise mobility security frameworks.
• Demonstrated ability to collaborate across Cybersecurity, Active Directory Infrastructure, Virtual Systems, and UEM.
• Good communication skills, with the ability to convey technical information to both technical and non-technical audiences.

Responsibilities

• Lead macOS device management within Workspace ONE, including policy design, software distribution, and advanced troubleshooting, ensuring alignment with security standards.
• Administer Workspace ONE UEM with full system-level privileges, including management of administrative accounts, roles, provisioning tokens, compliance policies, and mobile applications.
• Oversee device enrollment and end-to-end lifecycle management for iOS, iPadOS, Android, and macOS platforms.
• Maintain mobility infrastructure components, including connector services, Hub services, and development environments, ensuring system stability and performance.
• Partner with Cybersecurity, UEM Security, and SOC teams to identify, assess, and remediate mobile vulnerabilities, including leading response efforts for emerging threats (e.g., iOS vulnerabilities such as DarkSword).
• Enforce compliance with mobility security standards, including HISPOL 8.0, HISPUB 8.3 (KNOX), and HISPUB 8.4 (Mobile Data Protection).
• Troubleshooting and resolution of complex mobility issues, including enrollment failures, KNOX/ABM integration, OS compatibility, and Workspace ONE platform issues.
• Coordinate cross-functional engineering efforts with AD Infrastructure, Cybersecurity, and Virtual Systems teams to support system changes, testing, and deployments.
• Provide guidance on Apple Business Manager (ABM) requirements, device ownership classifications, Member vs. staff exemption criteria, and vendor onboarding processes, ensuring accurate provisioning within ABM and MDM systems.
• Serve as the primary mobility subject matter expert for Members, Chiefs of Staff, IT providers, Technology Service Desk, and internal engineering teams.

Skills

Mobile Device Management

Workspace ONE UEM

macOS enterprise

Scripting

Security controls

Cross-team collaboration

Clear communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Jamf

Intune

Job description

Tetrad Digital Integrity (TDI) is a cybersecurity firm built for high-consequence environments where mission, complexity, and trust intersect. Our single focus has been delivering cyber solutions to effectively manage risk & the business of cyber for 25 years!

The Systems Engineer for Mobility serves as a subject matter expert responsible for the administration, security, lifecycle management, and reliability of the Unified Endpoint Management - Mobility environment. Supporting approximately 20,000 users, the platform enables secure mobile access to email, calendar, applications, and intranet resources across iOS, iPadOS, Android, and macOS, with a focus on macOS engineering and security within Workspace ONE.

This role ensures secure, reliable mobile services through integration with on-premises Exchange and Microsoft 365 (Exchange Online), while adhering to security policies and mobility standards.

_ This position is hybrid with commute to the DC area 3-4 times per week. _

RESPONSIBILITIES:

• Lead macOS device management within Workspace ONE, including policy design, software distribution, and advanced troubleshooting, ensuring alignment withsecurity standards
• Administer Workspace ONE UEM with full system-level privileges, including management of administrative accounts, roles, provisioning tokens, compliance policies, and mobile applications
• Oversee device enrollment and end-to-end lifecycle management for iOS, iPadOS, Android, and macOS platforms
• Maintain mobility infrastructure components, including connector services, Hub services, and development environments, ensuring system stability and performance
• Partner with Cybersecurity, UEM Security, and SOC teams to identify, assess, and remediate mobile vulnerabilities, including leading response efforts for emerging threats (e.g., iOS vulnerabilities such as DarkSword)
• Enforce compliance withmobility security standards, including HISPOL 8.0, HISPUB 8.3 (KNOX), and HISPUB 8.4 (Mobile Data Protection)
• Troubleshooting and resolution of complex mobility issues, including enrollment failures, KNOX/ABM integration, OS compatibility, and Workspace ONE platform issues
• Coordinate cross-functional engineering efforts with AD Infrastructure, Cybersecurity, and Virtual Systems teams to support system changes, testing, and deployments
• Provide guidance on Apple Business Manager (ABM) requirements, device ownership classifications, Member vs. staff exemption criteria, and vendor onboarding processes, ensuring accurate provisioning within ABM and MDM systems
• Serve as the primary mobility subject matter expert for Members, Chiefs of Staff, IT providers, Technology Service Desk, and internal engineering teams

QUALIFICATIONS:

• Bachelor’s degree in Computer Science or a related field with 5+years of relevant experience, or equivalent professional experience in Mobile Device Management
• Proficiency in Workspace ONE UEM administration with 3-4years of hands-on experience
• Experience managing macOS in an enterprise environment using Workspace ONE or comparable MDM platforms (e.g., Jamf, Intune)
• Hands-on experience with macOS configuration profiles, scripting, patching, and security controls
• Good understanding of mobile operating systems and enterprise mobility security frameworks
• Demonstrated ability to collaborate across technical teams, including Cybersecurity, Active Directory Infrastructure, Virtual Systems, and UEM
• Good communication skills, with the ability to convey technical information to both technical and non-technical audiences

PAY RANGE:

The anticipated salary range for this position is $120,000 - $140,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range.

TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.

“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”